Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
File:                     B3vNZjsOY7316bgJr3Gu8eWt9js.mft (raw, json)
Hash identifier:          +kJf0388J02OlwBpkH1mKqq4v7cxZhlvow0Hr63HPC0=
Subject key identifier:   3B:9C:38:96:AF:E8:6C:39:D6:1E:76:4A:84:ED:EC:46:E1:D1:17:D3
Authority key identifier: 07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B
Certificate issuer:       /CN=A9134309/serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B
Certificate serial:       0104
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
Manifest number:          FB
Signing time:             Mon 21 Sep 2026 06:17:54 +0000
Manifest this update:     Mon 21 Sep 2026 06:17:53 +0000
Manifest next update:     Mon 28 Sep 2026 06:17:53 +0000
Files and hashes:         1: B3vNZjsOY7316bgJr3Gu8eWt9js.crl (hash: vsms22nU/S4JIIMAj9VnT6s1201EHPGs+X0lz6WWBlM=)
                          2: 13CC532280EC11F0A973810CC4F9AE02.roa (hash: JqgQRdLeaIMLexLk5Sg27CS93/2/7D3KXGP9opjlvo0=)
                          3: 0322BF5A6D3411F0A208C05DC4F9AE02.roa (hash: S+CNDCXqBAPQY2/ZroCNVvDaAZiKggJqTG4IMa7VBfA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl
                          rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:17:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260 (0x104)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134309, serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B
        Validity
            Not Before: Sep 21 06:17:53 2026 GMT
            Not After : Sep 28 06:17:53 2026 GMT
        Subject: CN=6ab0cc11-03f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f9:df:24:57:37:ad:ec:c3:f8:d2:8d:6f:78:
                    22:cd:a2:b2:02:e6:c4:93:a7:6d:8f:fe:6b:dc:75:
                    74:2a:3a:fe:72:76:4e:b2:2c:69:f2:9c:fb:60:92:
                    bf:67:a8:e1:26:f1:22:29:00:98:b0:97:0a:2c:1f:
                    dd:c8:88:83:a5:9e:0f:2d:c2:69:b2:bc:eb:9e:93:
                    6c:f2:d6:72:18:cf:8e:9f:80:be:6c:b6:57:b9:f1:
                    0a:dd:9c:56:aa:2f:c7:a8:34:1f:42:38:d2:57:aa:
                    ec:62:12:b2:73:a8:03:85:a7:80:d6:50:d5:f2:c0:
                    a6:83:f1:64:f9:49:ec:1b:97:52:45:a0:1f:86:45:
                    84:8c:c7:a0:8d:52:8c:8b:06:4b:92:d4:87:8e:48:
                    41:ed:a2:37:d2:ac:e3:f7:a4:ed:08:fa:38:8f:26:
                    08:36:a9:c5:59:72:0c:d5:c0:00:ef:bc:37:32:1a:
                    0d:2d:75:13:26:ee:e4:19:e0:15:0e:8f:80:24:ea:
                    e6:34:07:e7:2c:72:dd:e1:5c:1a:64:75:f6:ff:3e:
                    16:2d:d8:29:d9:5c:41:c8:92:c0:e3:9d:6e:29:66:
                    37:40:55:ab:48:37:ed:66:3d:7c:f6:33:fd:9d:9d:
                    16:40:87:84:ea:25:e6:f4:3f:52:79:ed:d4:e7:8b:
                    fa:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:9C:38:96:AF:E8:6C:39:D6:1E:76:4A:84:ED:EC:46:E1:D1:17:D3
            X509v3 Authority Key Identifier:
                keyid:07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:82:48:e8:20:dd:7c:a5:67:7c:32:4d:e4:26:36:62:27:01:
         5c:27:8c:2b:b4:b5:01:f1:b7:e0:f9:26:3c:6f:ec:6c:17:2c:
         bf:87:4f:a2:ab:61:0c:7c:bc:4f:de:f7:6a:e6:dc:2d:77:19:
         62:98:6b:37:7b:ea:08:22:a1:a8:0d:02:66:38:f3:d2:6f:66:
         1f:c2:39:ce:dd:0a:96:ab:84:80:e3:f1:e9:50:34:ca:c1:d2:
         84:00:3b:a3:eb:f6:4a:d1:7a:03:c3:82:43:07:48:70:9b:46:
         04:8b:3f:15:41:b7:c6:66:68:15:eb:5a:f9:36:ce:7a:e5:a5:
         46:b4:1a:0c:d9:55:7c:26:b8:55:e5:7b:50:89:d7:4a:f3:56:
         69:e6:20:82:a5:11:63:82:31:3f:0e:f0:44:59:fa:54:6d:bb:
         b7:e4:6e:c5:b5:49:34:2e:ec:bc:30:ff:10:a2:56:02:a2:8e:
         f4:02:0b:0d:38:2a:89:bb:1a:a8:1e:87:ae:25:69:92:8f:1e:
         97:4f:3e:1c:84:a7:81:85:1c:97:5c:e8:79:94:7f:53:51:0d:
         81:5d:d9:e2:bc:9a:76:7d:68:08:57:3d:20:c1:78:dc:5d:90:
         f6:66:72:8d:bb:a1:b7:9c:0d:73:cf:e0:12:ef:25:74:ef:96:
         d6:ad:b8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:17:12 2026 by rpki-client